- Conduid
- Marketplace
- #security-testing
MCP servers tagged security-testing
43 live MCP servers tagged "security-testing", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with security-testing.
Pentest MCP Server
MCP server for penetration testing
Agent Opfor
Open-source adversary emulation for AI agents and MCP servers.
BugTraceAI
Open-source, self-hosted web pentesting suite with agentic scanning, analyst tools, API testing, model checkpoints and MCP integrations.
Toolbox
Collaborative application security testing between humans and agents via CLI and MCP
Stigix
Stigix is a lab platform to validate SD‑WAN and SASE. It unifies SaaS traffic generation, security tests, convergence probes, and voice/IoT/VyOS simulations in one web UI
BestTester
Production-grade Playwright + TypeScript QA framework with AI-powered testing, LLM-as-Judge evaluation, MCP server, 7 CLI agents, security fuzzing, CI/CD pipelines, Jira sync, and…
Waftester
Professional WAF security testing toolkit
cli
Professional WAF security testing toolkit
BestTester
Production-grade Playwright + TypeScript QA framework with AI-powered testing, LLM-as-Judge evaluation, MCP server, 7 CLI agents, security fuzzing, CI/CD pipelines, Jira sync, and…
Client And Proxy
A universal MCP client with proxying feature to interact with MCP Servers which support STDIO transport.
Red Team Blue Team Agent Fabric
AI agent security harness, adversarial testing: 611 executable tests in the v4.20.0 release, across MCP, A2A, x402/L402, decision governance, benchmark integrity, human-in-the-loo…
Brutalist MCP
All AIs are sycophants.
PENTEST MCP SERVER
AI-powered security testing for Claude Desktop. MCP server integrating 6 essential pentesting tools (nmap, nikto, sqlmap, wpscan, dirb, searchsploit) in a secure Kali Linux Docker…
Wxtap
微信小程序安全调试工具：Wails 桌面 GUI + MCP 工具面，经 Frida 注入 WMPF 宿主并接入 9421 调试通道
Agentic Security Workspace
Project-local agent skills for evidence-driven security testing and reverse engineering.
Burp MCP
Burp Suite MCP server with 40+ tools for authorized web security testing
Invaris Agentsec
Adversarial security testing for AI agents — prompt injection, tool misuse, memory poisoning, and MCP scanning, with CI-ready regression testing and reports.
Breaker
Replay-verified MCP security testing and deterministic policy hardening for tool-using AI agents
Adversarial Suite
🔒 Simulate adversarial behaviors to test and strengthen MCP defenses without real exploitation or risk, ensuring robust security evaluations.
Mylonite
Open-source AI-layer security testing — probes your AI agent for weaknesses and writes a validated regression test for each one it finds, gating CI.
Adversarial Suite
🔒 Simulate adversarial behaviors to test and strengthen MCP defenses without real exploitation or risk, ensuring robust security evaluations.
Shield
AI-powered security scanner for MCP servers. Tests against the OWASP MCP Top 10 — prompt injection, tool poisoning, SSRF, and more — using a LangGraph attack agent.
Breaker
Replay-verified MCP security testing and deterministic policy hardening for tool-using AI agents
Redteam
MCP server security testing with live adversarial checks, a reproducible demo, HTML reports, and a GitHub Action.
Proof
MCP server verification toolkit — wire-level protocol conformance, security hygiene, and record/replay contract regression, shipped as a client-ready delivery report plus a CI gat…
AgentIQ
Agentic API testing and security validation: AI agents that act only through a permission-gated, SSRF-guarded, audited MCP tool layer.
Secpluger
AI-powered pentesting automation with MCP integration for Claude Code - parallel scanning, OWASP ASVS 5.0, workflow recording/replay
Stress Test
Red team toolkit for stress-testing MCP security scanners — find detection gaps before attackers do
Overstep
Authorization testing for REST APIs and MCP servers. Declare who may do what as a matrix, and overstep turns it into positive and negative tests that catch BOLA, BFLA, BOPLA and p…
Testssl MCP Server
MCP Server for SSL/TLS security testing with testssl.sh
Velvet Rope
Test whether blocking one AI-agent route actually prevents the real-world effect. ShadowPath maps and replays alternate authorization paths.
T2M Security Manager
AI-powered desktop tool for test automation and security testing, built on the Model Context Protocol (MCP). Free and open-source.
OpenBOLA
Authorization-first, deterministic BOLA/IDOR validation for HTTP APIs
Agent Safe MCP
A Remote MCP Server that checks every email before your agent acts on it. Connect via MCP protocol, pay per use with Skyfire.
Dsh Burpsuite MCP
Native Burp Suite MCP tools and live settings for DeepSeek Harness
Handoffprobe
Open-source security testing for A2A → MCP agent handoffs and cross-protocol AI agent systems.
Envelope Harness
Two-arm attack harness for MCP tool-result integrity: control agent falls to injection-driven exfil, protected agent (signed envelope + Biba floor) holds. Companion to purplehooti…
Axguard
Adversarial security testing for AI agents — MCP, A2A, x402/L402, and live tool-use. Tests as YAML, evidence as JSON.
Damn Vulnerable Agent Asset Corpus
Damn Vulnerable Agent Asset Corpus: benchmark fixtures for agent-asset scanners and AAC release assurance.
Agentic Redteam Harness
A/B red-team harness for agentic AI: 34 OWASP-LLM / MITRE-ATLAS attacks fired at a multi-agent app with and without a control plane, plus a live malicious-MCP-server demo. Determi…
Whaleguard Redlab
Local-first, scope-guarded AI red-team lab for authorized LLM, Agent and MCP security evaluation.
Agent Trust Plane
Authorization and security regression testing for AI agents and MCP tools.
Security
🔒 Enhance security for Model Context Protocol (MCP) servers with comprehensive guidelines and compliance mapping for SOC2, HIPAA, and PCI DSS.